Malicious
ef6aa0d30ceb7dc8847c086ac07f45b4
ZIP Archive
MD5: ef6aa0d30ceb7dc8847c086ac07f45b4
Size: 591 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
591 B · 591 B
First seen
2026-08-03 13:40 · 2 months ago
Last seen
2026-08-03 13:40 · 2 months ago
Last analysis
2026-08-03 13:40 · 2 months ago
Hashes
MD5
ef6aa0d30ceb7dc8847c086ac07f45b4
Sha1
63971ba03fb0599f44c51c89f069f02120393a60
Sha256
82416b575ee372206422107189369e84746ebf6190670e538a3f4248a7380bfa
Sha384
f0a90d5f7122659bbd42c1dd0f266efd21feea4fb637e16d4b22df6d1bd695e7492933942e9d5a052fe86ca3891f467a
Sha512
69fdb682974d6fd2634a448cf999f87601589accf7c5eb06e1e73b8b0b55cedd3a4f4c92f80d95ad1fb87d10fb694e76970d547aa2d06c96bbfa3f069ac47820
SSDeep
12:5jGowQUt2WrDyQTjxV6PVs9GBSePQ7esURW40Vlr5cz5HbRmej40P0buMfwQbia+:9GotUtrDyQXxKs0cSOgoV0Hmej40P0ab
TLSH
89F0E1B540529A39F15E3CF0DD57C111D2176656013D1F92CA2BC5465695DE9F0A84D0
3 malicious · 3 files
ZIPef6aa0d30ceb7dc8847c086ac07f45b4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GDC4DU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
ZIPef6aa0d30ceb7dc8847c086ac07f45b4T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDOC-GDC4DU.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
ef6aa0d30ceb7dc8847c086ac07f45b4 › DOC-GDC4DU.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account